$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: vNqQE93UdV4mamoc0CRXn1TxGSCKEE8ue2FMGxwdnnU= Subject key identifier: 28:BA:79:FE:80:FC:90:22:F4:6A:67:B8:DF:94:D5:8F:AF:B7:BF:83 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 04E3 Signing time: Fri 19 Sep 2025 00:56:11 +0000 Manifest this update: Fri 19 Sep 2025 00:56:11 +0000 Manifest next update: Fri 26 Sep 2025 00:56:11 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: ERwM1ZTFqd7FOCa20zlOkRY6B80s9fV4fIE6c75XED4=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Sep 19 00:56:11 2025 GMT Not After : Sep 26 00:56:11 2025 GMT Subject: CN=68ccaa2b-b719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:ed:c9:b7:56:2e:21:00:16:9c:90:27:de: 69:20:c2:34:87:c4:20:d3:84:33:02:d2:aa:5f:13: f4:3a:51:20:ac:2a:d2:02:1f:b8:20:fb:db:e6:90: af:e4:40:41:f6:5d:6f:4e:09:8a:17:35:d4:10:8f: f8:d8:dc:de:1c:f6:38:09:53:e6:f3:f1:0e:af:07: 31:a4:e7:39:b6:7a:ec:60:12:27:77:44:51:47:b3: 46:5a:0f:60:e0:5b:11:63:48:58:7c:33:ba:8c:28: 10:a2:47:5b:4d:28:29:1c:6a:c9:5b:45:7a:bb:a7: a3:15:14:10:6d:b5:a0:7f:f7:b7:85:05:30:07:3f: bc:61:48:39:bc:87:bd:42:ba:e5:1d:e4:2d:99:cd: 8e:c7:42:5a:3a:e1:0c:6d:d0:80:c8:e8:84:38:93: b9:ce:ba:89:b1:51:4e:92:13:25:90:c9:a5:e8:93: e9:a0:fd:4a:6d:fb:36:fc:7c:29:25:77:7d:81:ec: 45:ef:b3:03:05:f6:d6:da:9b:71:22:87:e8:5a:be: 20:40:e1:c1:ce:cf:7c:ba:60:a9:ee:bf:d6:e7:89: c6:54:1d:f6:83:9b:13:7a:ab:42:af:83:cc:e5:06: 52:5c:9c:30:08:7b:dd:f7:a4:9c:63:44:21:d3:b2: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:79:FE:80:FC:90:22:F4:6A:67:B8:DF:94:D5:8F:AF:B7:BF:83 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1c:a4:fd:5d:a6:d7:6f:72:bf:54:7b:ed:19:e1:46:66:fe: 70:93:24:23:2f:99:b2:30:a1:1d:e1:0f:4a:e5:d3:dc:cb:2e: d9:ef:c5:71:94:58:8c:a9:33:f7:6f:a3:40:20:70:65:4e:59: 56:17:7a:14:10:3f:83:7d:18:ed:94:fa:b7:aa:ae:8c:38:5d: b2:c0:67:96:1f:28:00:c3:6b:36:4c:8c:32:8a:f7:fd:12:80: 1e:e7:11:d3:9d:63:d7:ff:4f:f5:8b:a7:6d:8c:40:1b:fa:11: 08:bd:8f:e3:c5:73:88:1b:48:ad:c3:a0:c6:e8:4d:fa:cc:76: 7e:36:a9:7d:2d:de:c8:fd:dd:f2:9c:64:ac:53:c0:49:16:f0: 1e:5c:36:3f:b3:8a:57:35:f7:e7:8d:57:9b:6b:4a:6a:b1:bc: b1:61:3b:a5:59:c9:a2:92:eb:b1:47:a3:f4:bd:fc:f4:bc:ab: f1:17:8a:81:24:67:b2:cd:89:54:c2:1b:4f:0c:da:37:e6:b4: 98:16:b1:51:16:36:8b:1d:6b:83:eb:1d:cd:7d:af:f6:d3:4f: 66:4e:41:10:98:ee:34:27:b7:df:d5:06:e0:80:77:c5:d0:7e: 5b:a7:0e:79:32:ed:20:37:9e:01:66:1e:18:ee:ec:57:81:ed: 7a:65:b3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwOTE5MDA1NjExWhcNMjUwOTI2MDA1NjExWjAYMRYwFAYD VQQDEw02OGNjYWEyYi1iNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhztybdWLiEAFpyQJ95pIMI0h8Qg04QzAtKqXxP0OlEgrCrSAh+4IPvb5pCv 5EBB9l1vTgmKFzXUEI/42NzeHPY4CVPm8/EOrwcxpOc5tnrsYBInd0RRR7NGWg9g 4FsRY0hYfDO6jCgQokdbTSgpHGrJW0V6u6ejFRQQbbWgf/e3hQUwBz+8YUg5vIe9 QrrlHeQtmc2Ox0JaOuEMbdCAyOiEOJO5zrqJsVFOkhMlkMml6JPpoP1Kbfs2/Hwp JXd9gexF77MDBfbW2ptxIofoWr4gQOHBzs98umCp7r/W54nGVB32g5sTeqtCr4PM 5QZSXJwwCHvd96ScY0Qh07JaWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi6ef6A /JAi9GpnuN+U1Y+vt7+DMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNHKT9XabXb3K/VHvtGeFGZv5wkyQjL5myMKEd4Q9K5dPcyy7Z78Vx lFiMqTP3b6NAIHBlTllWF3oUED+DfRjtlPq3qq6MOF2ywGeWHygAw2s2TIwyivf9 EoAe5xHTnWPX/0/1i6dtjEAb+hEIvY/jxXOIG0itw6DG6E36zHZ+Nql9Ld7I/d3y nGSsU8BJFvAeXDY/s4pXNffnjVeba0pqsbyxYTulWcmikuuxR6P0vfz0vKvxF4qB JGeyzYlUwhtPDNo35rSYFrFRFjaLHWuD6x3Nfa/2009mTkEQmO40J7ff1QbggHfF 0H5bpw55Mu0gN54BZh4Y7uxXge16ZbOg -----END CERTIFICATE-----Generated at Fri Sep 19 07:08:18 2025 by rpki-client